# Langflow vulnerabilities Source: https://junglewise.ai/threats/technologies/langflow Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/langflow.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 96 vulnerabilities in Langflow: 0 in the last 7 days and 48 in the last 90 days, 20 of them critical and 5 exploited in the wild. The most recent, Langflow SSRF in URL-taking components, was published on 6 October 2026. Nothing in the last four weeks, down from 4 vulnerabilities in the four before. 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 48 - All time: 96 (20 critical, 5 exploited in the wild) ## About Langflow Langflow is a low-code platform for building and deploying multi-agent AI applications and RAG workflows. ## Latest Langflow vulnerabilities - [Langflow SSRF in URL-taking components](https://junglewise.ai/threats/langflow-ssrf-in-url-taking-components-protection-disabled-by-default-db7cac37) (medium, published 6 Oct 2026) - [CVE-2026-105698: Langflow authorization bypass in flow API endpoints](https://junglewise.ai/threats/cve-2026-105698-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (medium, CVSS 5.4, published 5 Oct 2026) - [CVE-2026-105697: Langflow MCP stdio command injection](https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2026-101861: Langflow unsafe eval() in schema.py code execution](https://junglewise.ai/threats/cve-2026-101861-langflow-1-0-16-before-1-12-0-and-0-0-94-before-1-12-0-contain) (medium, CVSS 4.1, published 28 Sep 2026) - [CVE-2026-84889: IBM Langflow OSS path traversal arbitrary file write](https://junglewise.ai/threats/cve-2026-84889-ibm-langflow-oss-path-traversal-arbitrary-file-write) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-81941: IBM Langflow OSS privilege escalation in MCP Tools component](https://junglewise.ai/threats/cve-2026-81941-ibm-langflow-oss-privilege-escalation-in-mcp-tools-component) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-81940: IBM Langflow OSS code injection in flow display names](https://junglewise.ai/threats/cve-2026-81940-ibm-langflow-oss-code-injection-in-flow-display-names) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-81268: IBM Langflow OSS insufficient API key session expiration](https://junglewise.ai/threats/cve-2026-81268-ibm-langflow-oss-insufficient-api-key-session-expiration) (high, CVSS 8.1, published 10 Sep 2026) - [CVE-2026-81265: IBM Langflow OSS server-side request forgery via URL validation bypass](https://junglewise.ai/threats/cve-2026-81265-ibm-langflow-oss-server-side-request-forgery-via-url-validation) (high, CVSS 7.5, published 10 Sep 2026) - [CVE-2026-81213: IBM Langflow server-side request forgery in URL validation](https://junglewise.ai/threats/cve-2026-81213-ibm-langflow-server-side-request-forgery-in-url-validation) (high, CVSS 8.6, published 10 Sep 2026) - [CVE-2026-81211: IBM Langflow arbitrary code execution in custom components](https://junglewise.ai/threats/cve-2026-81211-ibm-langflow-arbitrary-code-execution-in-custom-components) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-81204: IBM Langflow OSS code injection in graph construction](https://junglewise.ai/threats/cve-2026-81204-ibm-langflow-oss-code-injection-in-graph-construction) (critical, CVSS 9.8, published 10 Sep 2026) - [CVE-2026-79742: IBM Langflow OSS arbitrary code execution via incomplete environment variable blocklist](https://junglewise.ai/threats/cve-2026-79742-ibm-langflow-oss-arbitrary-code-execution-via-incomplete) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-79725: IBM Langflow OSS path traversal and improper access control](https://junglewise.ai/threats/cve-2026-79725-ibm-langflow-oss-path-traversal-and-improper-access-control) (medium, CVSS 6.5, published 10 Sep 2026) - [CVE-2026-79724: IBM Langflow OS command injection via improper neutralization](https://junglewise.ai/threats/cve-2026-79724-ibm-langflow-os-command-injection-via-improper-neutralization) (critical, CVSS 9.8, published 10 Sep 2026) - [CVE-2026-79723: IBM Langflow OSS server-side request forgery in API endpoint validation](https://junglewise.ai/threats/cve-2026-79723-ibm-langflow-oss-server-side-request-forgery-in-api-endpoint) (medium, CVSS 5, published 10 Sep 2026) - [CVE-2026-78575: IBM Langflow OSS command injection in MCP stdio configuration](https://junglewise.ai/threats/cve-2026-78575-ibm-langflow-oss-command-injection-in-mcp-stdio-configuration) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-78571: IBM Langflow code injection in eval() call](https://junglewise.ai/threats/cve-2026-78571-ibm-langflow-code-injection-in-eval-call) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-78569: IBM Langflow OSS incomplete denylist code execution](https://junglewise.ai/threats/cve-2026-78569-ibm-langflow-oss-incomplete-denylist-code-execution) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-76059: IBM Langflow OSS static security scanner bypass via annotated class-body assignment](https://junglewise.ai/threats/cve-2026-76059-ibm-langflow-oss-static-security-scanner-bypass-via-annotated) (high, CVSS 8.8, published 10 Sep 2026) - [CVE-2026-9225: IBM Langflow access control bypass in File Read component](https://junglewise.ai/threats/cve-2026-9225-ibm-langflow-access-control-bypass-in-file-read-component) (medium, CVSS 6.5, published 10 Sep 2026) - [CVE-2026-85025: IBM Langflow arbitrary code execution in MCP endpoints](https://junglewise.ai/threats/cve-2026-85025-ibm-langflow-arbitrary-code-execution-in-mcp-endpoints) (critical, CVSS 9.8, published 10 Sep 2026) - [CVE-2026-17631: IBM Langflow OSS server-side request forgery in flow components](https://junglewise.ai/threats/cve-2026-17631-ibm-langflow-oss-server-side-request-forgery-in-flow-components) (medium, CVSS 5, published 4 Sep 2026) - [CVE-2026-17627: IBM Langflow OSS authorization bypass in voice-mode WebSocket](https://junglewise.ai/threats/cve-2026-17627-ibm-langflow-oss-authorization-bypass-in-voice-mode-websocket) (medium, CVSS 4.9, published 4 Sep 2026) - [CVE-2026-17622: IBM Langflow OSS path traversal in file and knowledge base components](https://junglewise.ai/threats/cve-2026-17622-ibm-langflow-oss-path-traversal-in-file-and-knowledge-base) (medium, CVSS 6.5, published 4 Sep 2026) ## Most severe Langflow vulnerabilities - [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-0770: Langflow remote code execution in validate endpoint](https://junglewise.ai/threats/cve-2026-0770-langflow-remote-code-execution-in-validate-endpoint) (critical, exploited in the wild, CVSS 9.8, published 23 Jan 2026) - [CVE-2026-33017: Langflow unauthenticated remote code execution in build_public_tmp endpoint](https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public) (critical, exploited in the wild, CVSS 9.8, published 20 Mar 2026) - [CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE](https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to) (critical, exploited in the wild, CVSS 8.8, published 6 Dec 2025) - [CVE-2025-3248: Langflow Unauth RCE](https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability) (critical, exploited in the wild, CVSS 4, published 17 Jun 2025) - [CVE-2026-19295: IBM Langflow OSS eval injection in schema creation](https://junglewise.ai/threats/cve-2026-19295-ibm-langflow-oss-eval-injection-in-schema-creation) (critical, CVSS 9.9, published 28 Aug 2026) - [CVE-2026-33309: Langflow path traversal and arbitrary file write in v2 API](https://junglewise.ai/threats/cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api) (critical, CVSS 9.9, published 19 Mar 2026) - [CVE-2026-105697: Langflow MCP stdio command injection](https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2024-42835: Langflow remote code execution in PythonCodeTool](https://junglewise.ai/threats/cve-2024-42835-langflow-remote-code-execution-in-pythoncodetool) (critical, CVSS 9.8, published 31 Oct 2024) - [CVE-2026-81204: IBM Langflow OSS code injection in graph construction](https://junglewise.ai/threats/cve-2026-81204-ibm-langflow-oss-code-injection-in-graph-construction) (critical, CVSS 9.8, published 10 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 4 vulnerabilities in the four before. 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 8 | 2 | 0 | | 31 Aug 2026 | 17 | 0 | 0 | | 7 Sep 2026 | 18 | 3 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 3 | 1 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Langflow technologies - [Langflow-Base](https://junglewise.ai/threats/technologies/langflow-langflow-base): 4 vulnerabilities - [Langflow Lfx](https://junglewise.ai/threats/technologies/lfx): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Langflow vulnerabilities", https://junglewise.ai/threats/technologies/langflow, 12 November 2026.